Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TNcXyFK40i_LfCxeOSjLrzMeow8.roa
File: TNcXyFK40i_LfCxeOSjLrzMeow8.roa (raw, json)
Hash identifier: vq94xp/6lKpaoPYYpX2QKm7GII/wboTM581jsoqmZVo=
Subject key identifier: 4C:D7:17:C8:52:B8:D2:2F:CB:7C:2C:5E:39:28:CB:AF:33:1E:A3:0F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C78648771D15CBA21613058EB14EAC7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TNcXyFK40i_LfCxeOSjLrzMeow8.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 81.28.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 04:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:64:87:71:d1:5c:ba:21:61:30:58:eb:14:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd717c852b8d22fcb7c2c5e3928cbaf331ea30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f8:95:94:82:17:11:e4:dc:c0:d1:6e:09:38:
fa:da:bd:27:9c:d4:d4:d2:c0:8b:08:8a:84:ed:28:
d1:c0:29:54:12:01:9a:0b:ce:59:8a:a9:ea:41:fa:
38:ed:c7:1b:e8:f4:8f:23:49:5b:8a:4f:e4:21:3a:
11:8a:51:93:99:76:81:17:78:21:11:42:00:45:31:
16:ed:ca:4c:be:6f:f1:bb:15:c6:86:b5:a0:5e:7c:
29:c0:50:98:c1:f4:12:87:ad:4c:21:50:f3:39:d5:
d6:5d:b7:ae:99:42:f2:76:1d:e1:a8:86:b5:a7:6c:
a5:1a:1b:8a:33:bc:a1:44:db:54:05:2f:55:a9:01:
d2:c6:2f:73:46:9e:89:aa:33:11:7c:19:4b:5e:05:
67:6a:31:ef:22:1a:a9:4e:bc:d9:3c:87:94:cd:e9:
51:04:99:86:49:76:0c:11:90:c9:35:08:4f:cc:b9:
1b:74:b8:1e:f4:15:aa:7c:53:2c:8d:b7:53:b0:02:
86:7d:4f:2c:8f:9b:06:db:7c:b5:c6:e0:c7:12:a8:
73:76:72:ef:a1:46:ec:38:90:0e:6c:df:7f:12:0f:
0f:7e:b8:78:87:66:14:38:5d:3c:62:3e:a5:8c:b6:
0a:28:3e:8c:c9:15:93:6b:ac:e2:fc:e6:48:bc:15:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:17:C8:52:B8:D2:2F:CB:7C:2C:5E:39:28:CB:AF:33:1E:A3:0F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TNcXyFK40i_LfCxeOSjLrzMeow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f6:e1:80:e6:d1:a5:70:79:9d:37:8c:c3:c8:4e:e1:7e:76:
e5:24:69:c2:bd:f9:53:c5:36:fe:51:e8:2f:73:7f:f4:74:f4:
47:49:63:f5:3c:0c:d7:9d:3a:f7:cf:c7:ca:4b:d3:fd:0b:77:
ea:71:1f:ca:d8:2c:d1:f5:f3:cf:4e:67:40:0c:c9:ec:d2:ea:
f5:2e:37:e1:d4:d3:83:d5:61:c9:58:ee:a3:da:fc:8e:34:96:
5b:a5:78:cf:20:ae:3c:a3:94:80:5c:14:08:e8:1a:24:67:93:
34:53:98:33:4a:4f:a0:af:7d:e6:ef:56:77:04:2d:5e:bc:a1:
e9:7d:91:9a:97:d5:d7:d7:ae:35:e2:22:6d:1d:ce:bf:e7:47:
61:3d:4c:43:0e:00:25:3e:d6:93:d1:e5:cc:63:3a:3d:0b:20:
1c:45:23:1e:c8:85:1b:b9:74:41:15:85:cd:a8:06:43:2f:89:
be:4e:76:46:9f:be:03:95:3c:7b:68:bc:32:83:44:e5:46:26:
52:d6:94:05:cc:e5:4e:2f:30:3f:75:63:eb:9a:02:61:60:bd:
cb:b2:11:fa:a7:a4:30:88:bf:a8:80:f9:60:82:50:f9:26:48:
74:0b:53:57:31:c0:08:5e:55:88:6f:d3:1b:78:d6:35:70:55:
23:3d:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org